Compression Library
August 25, 2024 ยท View on GitHub
| ID | C0060 |
| Objective(s) | Data |
| Related ATT&CK Techniques | None |
| Version | 2.1 |
| Created | 17 January 2021 |
| Last Modified | 6 February 2024 |
Compression Library
Malware may utilize a compression library.
Use in Malware
| Name | Date | Method | Description |
|---|---|---|---|
| Dark Comet | 2008 | -- | DarkComet linked against ZLIB. [1] |
| Hupigon | 2013 | -- | Linked against ZLIB [1] |
Detection
| Tool: capa | Mapping | APIs |
|---|---|---|
| linked against aPLib | Compression Library (C0060) | -- |
| linked against ZLIB | Compression Library (C0060) | -- |
References
[1] capa v4.0, analyzed at MITRE on 10/12/2022